switched to composer.json for dependencies